A new Permissions report in the SharePoint admin center (under Data access governance) will show which sites a user can access, including direct or group-based permissions. Rolling out worldwide from mid-December 2025 to mid-January 2026, it requires no configuration and aids permission reviews.
Applies to: SharePoint Online
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).